mirror of
https://github.com/0xMarcio/cve.git
synced 2025-12-16 20:27:21 +00:00
19 lines
729 B
Markdown
19 lines
729 B
Markdown
|
### [CVE-2023-48197](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-48197)
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
### Description
|
|||
|
|
|
|||
|
|
Cross-Site Scripting (XSS) vulnerability in the ‘manageApiKeys’ component of Grocy 4.0.3 and earlier allows attackers to obtain victim's cookies when the victim clicks on the "see QR code" function.
|
|||
|
|
|
|||
|
|
### POC
|
|||
|
|
|
|||
|
|
#### Reference
|
|||
|
|
- https://nitipoom-jar.github.io/CVE-2023-48197/
|
|||
|
|
|
|||
|
|
#### Github
|
|||
|
|
- https://github.com/nitipoom-jar/CVE-2023-48197
|
|||
|
|
- https://github.com/nomi-sec/PoC-in-GitHub
|
|||
|
|
|